Cyber consulting room - CyberCon Edition - Threat Intel Led TableTop Exercises

Together, the Cyber Consulting Room – CyberCon Edition Panel Members will explore the crucial role threat intelligence plays in proactively preparing for and effectively responding to cyber security incidents. The discussion will delve into:

1. Leveraging threat intelligence to anticipate potential attacks and vulnerabilities:

• The panel will discuss how threat intelligence can be used to identify emerging threats, attacker motivations, and common tactics, techniques, and procedures (TTPs).
• They'll explore how to analyze threat data to understand your organisation's specific risk profile and prioritize vulnerabilities based on likelihood and impact.
• Examples may include using threat intelligence feeds to identify malware targeting specific industries or monitoring dark web forums for chatter about potential attacks organisations.

2. Building a robust crisis management plan informed by threat intelligence data:

• The panel will discuss how to translate threat intelligence into actionable steps for your crisis management plan.
• This could involve incorporating scenarios based on likely attack vectors identified by threat intelligence, or developing specific communication protocols for different types of incidents.
• Deepa Bradley, from South East Water, might share insights on building a crisis plan specific to the utility sector's vulnerabilities.

3. The importance of tabletop exercises in testing and refining your crisis response strategy:

• The discussion will explore the value of tabletop exercises, which simulate cyber security incidents to test your crisis response plan.
• The panel will discuss best practices for designing and conducting tabletop exercises, including how to inject realistic attack scenarios informed by threat intelligence.
• Eric Pinkerton, from Phronesis Crisis Management, might share his experience in facilitating tabletop exercises and how they can expose weaknesses in communication and collaboration during a crisis.

4. Best practices for communication and collaboration during a cyber security crisis:

• The panel will discuss the importance of clear and concise communication during a cyber security crisis.
• They'll explore strategies for communicating effectively with internal stakeholders, external partners, and the public.
• Heidi Winter, from National Australia Bank, might share insights on how threat intelligence can inform communication strategies by providing context and helping to shape the narrative around an incident.

5. Real-world examples of how threat intelligence has been used to mitigate cyber security incidents:

• The panel will share real-world examples of how threat intelligence has been used to successfully prevent or mitigate cyber security incidents.
• These examples could come from their own experiences or from publicly reported cases.
• The discussion will highlight the tangible benefits of investing in threat intelligence and its positive impact on an organisation's cyber resilience.